Ricoh DC (SR10) 1.1.0.8 – Denial of Service
# Exploit Title: Rocoh DC FTP (SR10) v1.1.0.8 DoS
windows
windows 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Boxoft WAV to MP3 Converter – ‘convert’ Local Buffer Overflow
#Exploit Title: Boxoft wav to mp3 converter SEH bypass technique tested on Win7x64
Microsoft Office 2007 – ‘msxml5.dll’ Crash (PoC)
#!/usr/bin/perl -w
PFTP Server 8.0f Lite – textfield Local Buffer Overflow (SEH) (PoC)
#*************************************************************************************************************
PCMan FTP Server 2.0.7 – ‘RENAME’ Remote Buffer Overflow
#!/usr/bin/python
PCMan FTP Server 2.0.7 – ‘GET’ Remote Buffer Overflow
#!/usr/bin/python
Xion Audio Player 1.5 build 155 – Stack Buffer Overflow
# Exploit Title: Xion Audio Player build 155 Stack Based BOF.
FHFS – FTP/HTTP File Server 2.1.2 Remote Command Execution
#!/usr/bin/python
VideoLAN VLC Media Player 2.2.1 – m3u8/m3u Crash (PoC)
#!/usr/bin/python
Microsoft Office 2007 – Malformed Document Stack Buffer Overflow
Source: https://code.google.com/p/google-security-research/issues/detail?id=170&can=1
Microsoft Office 2007 – OneTableDocumentStream Invalid Object
Source: https://code.google.com/p/google-security-research/issues/detail?id=171&can=1
GOM Audio 2.0.8 – ‘.gas’ Crash (PoC)
# Exploit Title: GOM Audio 2.0.8 Crash POC
Mock SMTP Server 1.0 – Remote Crash (PoC)
#!/usr/bin/python
Easy Address Book Web Server 1.6 – USERID Remote Buffer Overflow
#!/usr/bin/python
Easy File Sharing Web Server 6.9 – USERID Remote Buffer Overflow
#!/usr/bin/python
Mozilla – Maintenance Service Log File Overwrite Privilege Escalation
Source: https://code.google.com/p/google-security-research/issues/detail?id=427&can=1
Microsoft Office 2007 – MSPTLS Heap Index Integer Underflow (MS15-081)
Source: https://code.google.com/p/google-security-research/issues/detail?id=431&can=1
Microsoft Windows – ‘ATMFD.dll’ CharString Stream Out-of-Bounds Reads (MS15-021)
Source: https://code.google.com/p/google-security-research/issues/detail?id=382&can=1
Microsoft Windows – ‘ATMFD.DLL’ CFF table (ATMFD+0x34072 / ATMFD+0x3407b) Invalid Memory Access
Source: https://code.google.com/p/google-security-research/issues/detail?id=383&can=1
Microsoft Windows – ‘ATMFD.dll’ CFF table (ATMFD+0x3440b / ATMFD+0x3440e) Invalid Memory Access
Source: https://code.google.com/p/google-security-research/issues/detail?id=384&can=1
Microsoft Windows – ‘ATMFD.DLL’ Write to Uninitialized Address Due to Malformed CFF Table
Source: https://code.google.com/p/google-security-research/issues/detail?id=385&can=1
Microsoft Windows – ‘win32k.sys’ TTF Font Processing IUP[] Program Instruction Pool-Based Buffer Overflow
Source: https://code.google.com/p/google-security-research/issues/detail?id=368&can=1
Microsoft Windows – ‘win32k.sys’ TTF Font Processing win32k!scl_ApplyTranslation Pool-Based Buffer Overflow
Source: https://code.google.com/p/google-security-research/issues/detail?id=370&can=1
Microsoft Windows – ‘ATMFD.DLL’ Out-of-Bounds Read Due to Malformed Name INDEX in the CFF Table
Source: https://code.google.com/p/google-security-research/issues/detail?id=386&can=1
Microsoft Windows – ‘ATMFD.DLL’ Out-of-Bounds Read Due to Malformed FDSelect Offset in the CFF Table
Source: https://code.google.com/p/google-security-research/issues/detail?id=392&can=1
Microsoft Windows – ‘win32k.sys’ TTF Font Processing win32k!fsc_RemoveDups Out-of-Bounds Pool Memory Access
Source: https://code.google.com/p/google-security-research/issues/detail?id=401&can=1
Microsoft Windows – ‘win32k.sys’ TTF Font Processing win32k!fsc_BLTHoriz Out-of-Bounds Pool Write
Source: https://code.google.com/p/google-security-research/issues/detail?id=402&can=1
Microsoft Office 2007 – ‘mso.dll’ Use-After-Free (MS15-081)
Source: https://code.google.com/p/google-security-research/issues/detail?id=414&can=1
Microsoft Office 2007 – ‘mso.dll’ Arbitrary Free (MS15-081)
Source: https://code.google.com/p/google-security-research/issues/detail?id=417&can=1
Microsoft Office 2007 – ‘OGL.dll’ DpOutputSpanStretch::OutputSpan Out of Bounds Write (MS15-080)
Source: https://code.google.com/p/google-security-research/issues/detail?id=420&can=1
Microsoft Office 2007 – ‘wwlib.dll’ Type Confusion (MS15-081)
Source: https://code.google.com/p/google-security-research/issues/detail?id=423&can=1
Microsoft Office 2007 – ‘wwlib.dll’ fcPlcfFldMom Uninitialized Heap Usage
Source: https://code.google.com/p/google-security-research/issues/detail?id=424&can=1
Konica Minolta FTP Utility 1.0 – Remote Denial of Service (PoC)
#!/usr/bin/python
Multiple ChiefPDF Software 2.0 – Local Buffer Overflow
#!/usr/bin/python
Adobe Flash – Heap Use-After-Free in SurfaceFilterList::CreateFromScriptAtom
Source: https://code.google.com/p/google-security-research/issues/detail?id=484&can=1&q=label%3AProduct-Flash%20modif...
Adobe Flash AS2 – textfield.filters Use-After-Free (3)
Source: https://code.google.com/p/google-security-research/issues/detail?id=444&can=1&q=label%3AProduct-Flash%20modif...
Adobe Flash – URL Resource Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=410&can=1&q=label%3AProduct-Flash%20modif...
Adobe Flash – Out-of-Bounds Read in UTF Conversion
Source: https://code.google.com/p/google-security-research/issues/detail?id=378&can=1&q=label%3AProduct-Flash%20modif...
Adobe Flash AS2 – DisplacementMapFilter.mapBitmap Use-After-Free (2)
Source: https://code.google.com/p/google-security-research/issues/detail?id=377&can=1&q=label%3AProduct-Flash%20modif...
Adobe Flash AS2 – Color.setRGB Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=367&can=1&q=label%3AProduct-Flash%20modif...
Adobe Flash – Out-of-Bounds Memory Read While Parsing a Mutated ‘.TTF’ File Embedded in SWF
Source: https://code.google.com/p/google-security-research/issues/detail?id=363&can=1&q=label%3AProduct-Flash%20modif...
Adobe Flash – ‘.SWF’ Out-of-Bounds Memory Read (2)
Source: https://code.google.com/p/google-security-research/issues/detail?id=362&can=1&q=label%3AProduct-Flash%20modif...
Adobe Flash – ‘.SWF’ Out-of-Bounds Memory Read (1)
Source: https://code.google.com/p/google-security-research/issues/detail?id=361&can=1&q=label%3AProduct-Flash%20modif...
Adobe Flash AS2 – MovieClip.scrollRect Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=359&can=1&q=label%3AProduct-Flash%20modif...
Adobe Flash AS2 – DisplacementMapFilter.mapBitmap Use-After-Free (1)
Source: https://code.google.com/p/google-security-research/issues/detail?id=358&can=1&q=label%3AProduct-Flash%20modif...
Adobe Flash – Display List Handling Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=349&can=1&q=label%3AProduct-Flash%20modif...